Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

intel local manageability service vulnerabilities and exploits

(subscribe to this query)
641
VMScore
CVE-2017-5705
Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code.
Intel Manageability Engine Firmware 11.0Intel Manageability Engine Firmware 11.5Intel Manageability Engine Firmware 11.10Intel Manageability Engine Firmware 11.20Intel Manageability Engine Firmware 11.6Intel Manageability Engine Firmware 11.7
392
VMScore
CVE-2020-8704
Race condition in a subsystem in the Intel(R) LMS versions prior to 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
Intel Local Manageability ServiceSiemens Simatic Field Pg M5 FirmwareSiemens Simatic Field Pg M6 FirmwareSiemens Simatic Ipc427e FirmwareSiemens Simatic Ipc477e FirmwareSiemens Simatic Ipc477e Pro FirmwareSiemens Simatic Ipc527g FirmwareSiemens Simatic Ipc547g FirmwareSiemens Simatic Ipc627e FirmwareSiemens Simatic Ipc647e FirmwareSiemens Simatic Ipc677e FirmwareSiemens Simatic Ipc847e FirmwareSiemens Simatic Itp1000 Firmware
NA
CVE-2022-41610
Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access.
Intel Manageability CommanderIntel Endpoint Management Assistant Configuration Tool
409
VMScore
CVE-2020-8756
Improper input validation in subsystem for Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
Intel Converged Security And Manageability Engine
409
VMScore
CVE-2020-12297
Improper access control in Installer for Intel(R) CSME Driver for Windows versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via lo...
Intel Converged Security And Manageability EngineIntel Trusted Execution Technology 3.1.80Intel Trusted Execution Technology 4.0.30
409
VMScore
CVE-2020-12303
Use after free in DAL subsystem for Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
Intel Converged Security And Manageability EngineIntel Trusted Execution Technology 3.1.80Intel Trusted Execution Technology 4.0.30
409
VMScore
CVE-2020-8705
Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions prior to 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_0...
Intel Converged Security And Manageability EngineIntel Trusted Execution Technology 3.1.80Intel Trusted Execution Technology 4.0.30Intel Server Platform Services Sps E3 04.01.04.200Intel Server Platform Services Sps E5 04.01.04.400Intel Server Platform Services Sps Soc-a 04.00.04.300Intel Server Platform Services Sps Soc-x 04.00.04.200
1000
VMScore
CVE-2017-5689
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged netwo...
Intel Active Management Technology Firmware 6.1Intel Active Management Technology Firmware 6.2Intel Active Management Technology Firmware 10.0Intel Active Management Technology Firmware 11.0Intel Active Management Technology Firmware 6.0Intel Active Management Technology Firmware 9.0Intel Active Management Technology Firmware 9.1Intel Active Management Technology Firmware 9.5Intel Active Management Technology Firmware 7.0Intel Active Management Technology Firmware 7.1Intel Active Management Technology Firmware 11.5Intel Active Management Technology Firmware 11.6Intel Active Management Technology Firmware 8.0Intel Active Management Technology Firmware 8.1
187
VMScore
CVE-2020-0545
Integer overflow in subsystem for Intel(R) CSME versions prior to 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions prior to 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, S...
Intel Converged Security Management Engine FirmwareIntel Server Platform ServicesIntel Trusted Execution Engine
187
VMScore
CVE-2020-0539
Path traversal in subsystem for Intel(R) DAL software for Intel(R) CSME versions prior to 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 and Intel(R) TXE versions prior to 3.1.75, 4.0.25 may allow an unprivileged user to potentially enable denial of service via local acce...
Intel Converged Security Management Engine FirmwareIntel Trusted Execution Engine Firmware
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-codedCVE-2024-27202NULL pointer dereferenceCVE-2024-28075CVE-2024-33608CVE-2024-28889CVE-2024-34572template injectionCVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook